Exit demo CSP-ASSESSOR Customer Security Programme Assessor PDF format · free preview

In this set

Single choice 87

Multiple choice 29

Free demo preview

10 sample questions

Full product includes 116 questions.

Purchase the full set to unlock every question in your account.

PDF & Online Q&As

PDF + online access Study in your browser or print a clean PDF copy.

Answer key included Check your choices while you study.

Reviewed content Question sets are maintained for exam prep use.

15 years online A long-standing team focused on exam Q&A products.

Swift CSP-ASSESSOR - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/csp-assessor.html

Question 1

Single choice

A Treasury Management System (TMS) application is installed on the same machine as the customer connector (such as MQ server) connecting towards a Service Bureau Are these applications/systems in scope of CSCF?

The TMS application, the MQ server and hosting system are in the scope of the CSCF and must be placed in a secure zone

The TMS application, the MQ server and hosting system enters the scope of the CSCF advisory and should be placed in a secure zone

Only the MO server application is in scope of the CSCF> The TMS application is considered as back-
office

The TMS application is the highest risk and must be secured appropriately. The MQ server should be secured on a best effort basis

Question 2

Single choice

The SWIFT HSM Box must be hardened at the system level by the SWIFT user owning the equipment.

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025 Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

CSCF Assessment Completion Letter

Swift_CSP_Assessment_Report_Template

TRUE

FALSE

Question 3

Multiple choice

Select the correct statement(s).

The public and private keys of a Swift certificate are stored on the Hardware Security Module

The certificate stored on the Swift Hardware Security Module is used during the decryption operation of a message

The decryption operation uses the encryption private key of the receiver

To verify the signature the SwiftNetLink uses the signing private key of the receiver

Question 4

Multiple choice

For which reasons (as per the "CSP Independent Assessment Process for Assessors Guidelines") is it required to keep minutes of all key meetings related to a CSP assessment process (examples: kick-off, scope definition, exit meeting)? (Select all answers that apply)

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

CSCF Assessment Completion Letter

Swift_CSP_Assessment_Report_Template

To support quality review (audit) processes

For documentation purpose

To keep key information that can be used as input for the next step in the assessment process

To be uploaded in KYC-SA at the end of the assessment (mandated by SWIFT)

Question 5

Single choice

A SWIFT user owns a customer connector and a communication interface. What architecture type is the SWIFT user? (Select the correct answer)

Swift Customer Security Controls Policy

Swift Customer Security Controls Framework v2025

Independent Assessment Framework

Independent Assessment Process for Assessors Guidelines

Independent Assessment Framework - High-Level Test Plan Guidelines

Outsourcing Agents - Security Requirements Baseline v2025

CSP Architecture Type - Decision tree

CSP_controls_matrix_and_high_test_plan_2025

Assessment template for Mandatory controls

Assessment template for Advisory controls

CSCF Assessment Completion Letter

Swift_CSP_Assessment_Report_Template

Question 6

Single choice

The SWIFT VPN boxes are located between the Messaging and Communication interface.

Connectivity

Generic

Products Cloud

Products OnPrem

Security

TRUE

FALSE

Question 7

Multiple choice

A Swift user uses an application integrating a sFTP client to push files to a service bureau sFTP server
What architecture type is the Swift user?
(Choose all that apply.)

Question 8

Multiple choice

What is expected regarding Token Management when (physical or software-based) tokens are used? (Choose all that apply.)

Similar to user accounts, individual assignment and ownership for accurate traceability and revocation in case of potential tampering, loss or in case of user role change

Have in place a strict token assignment process. This avoids the need to perform g a regular review of assigned tokens

Individuals must not share their tokens. Tokens must remain under the control and supervision of its owner

All tokens must be stored in a safe when not used

Question 9

Single choice

The Swift user would like to perform their CSP assessment in May for the CSCF version that will only be active as from July the same year.
Is it allowed?

No, an assessment can only be done on the active version of the CSCF

Yes, the assessment on a particular version can start before the actual activation date

Question 10

Single choice

The SwiftNet Link (SNL) software is always required for the Swift Alliance Gateway to operate.

Connectivity

Generic

Products Cloud

Products OnPrem

Security

TRUE

FALSE

Showing 10 of 116 questions · Unlock the full set